{"uuid": "b883cb72-a569-4e15-8ee4-d9499e5c8604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10048", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Various D-Link Routers are vulnerable to OS command injection via the web\\n          interface. The vulnerability exists in command.php, which is accessible without\\n          authentication. This module has been tested with the versions DIR-600 2.14b01,\\n          DIR-300 rev B 2.13.\", \"disclosure_date\": \"2013-02-04\", \"fullname\": \"exploit/linux/http/dlink_command_php_exec_noauth\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"D-Link Devices Unauthenticated Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/dlink_command_php_exec_noauth\", \"references\": [\"CVE-2013-10048\", \"OSVDB-89861\", \"EDB-24453\", \"BID-57734\", \"URL-http://web.archive.org/web/20240619081418/http://www.dlink.com/uk/en/home-solutions/connect/routers/dir-600-wireless-n-150-home-router\", \"URL-http://www.s3cur1ty.de/home-network-horror-days\", \"URL-http://www.s3cur1ty.de/m1adv2013-003\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:29.747039Z"}